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including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 


1.  REPORT  DATE 

07  NOV  2011 

2.  REPORT  TYPE 

3.  DATES  COVERED 

00-00-2011  to  00-00-2011 

4.  TITLE  AND  SUBTITLE 

National  Cyber  Range 

5a.  CONTRACT  NUMBER 

5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

6.  AUTHOR(S) 

5d.  PROJECT  NUMBER 

5e.  TASK  NUMBER 

5f.  WORK  UNIT  NUMBER 

7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS (ES) 

Defense  Advanced  Research  Projects  Agency  (DARPA), Strategic 
Technology  Office, 3701  North  Fairfax  Drive, Arlington, VA, 22203-1714 

8.  PERFORMING  ORGANIZATION 

REPORT  NUMBER 

9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS  (ES) 

10.  SPONSOR/MONITOR’S  ACRONYM(S) 

11.  SPONSOR/MONITOR’S  REPORT 
NUMBER(S) 

12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

Presented  at  the  Colloquium  on  Future  Directions  in  Cyber  Security  on  November  7,  2011,  Arlington,  VA. 

14.  ABSTRACT 

15.  SUBJECT  TERMS 

- 1 - 

- 1 - 

16.  SECURITY  CLASSIFICATION  OF: 


a.  REPORT 

unclassified 


b.  ABSTRACT 

unclassified 


c.  THIS  PAGE 

unclassified 


17.  LIMITATION  OF 
ABSTRACT 

Same  as 
Report  (SAR) 


18.  NUMBER 
OF  PAGES 

6 


19a.  NAME  OF 
RESPONSIBLE  PERSON 


Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


Problems  in  Cyber  Testing 


A  fundamental  problem  faced  in  cyber  research  is  that  today  it  is  too 
difficult  to  test  the  capabilities  that  we  develop,  in  a  secure  and  realistic 
environment 

Existing  test  facilities  limit  our  development,  testing,  and  training 
timescales  from  matching  the  rapid  evolution  of  real-world  threats 


Our  Adversaries1  Test  Range 


Real  Networks  +  Real  Users  = 
Real  Results 


Our  Existing  Test  Ranges 


Approximated  Networks  +  Artificial 
Users  Behaviors  =  Questionable  Results 
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The  National  Cyber  Range 


Goal 

•  Create  a  secure,  self-contained  facility  that  can  rapidly  emulate  the  complexity 
of  defense  &  commercial  networks,  allowing  for  cost-effective  and  timely 
validation  of  cyber  technologies 

Current  Status 

•  Completed  the  technical  design  and  software  tool  sets  for  the  NCR 

•  Demonstrated  the  architecture  at  scale  on  an  operational  prototype  facility 

Range  Features 

•  Simple  experiment  design  tools 

•  Automated  range  build-out  capability 

•  Real-time  data  visualization  tools 

•  Automated  range  sanitization 

•  Supports  simultaneous  testing  at  multiple  security  levels 
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NCR  Facility 


Located  in  Orlando,  FL 


Range  Operations  Center 

FACTR  Wide  Situational  Awareness 
FACTR  Operations 
Accreditation  Maintenance 


Reconfiaurable  Test  Suite  1 

2  Operator  Rooms 

1  Brief/Debrief  Conf  Room 

Welcome  and  Reception 

Introductions 

Visitor  Check  In 

Security  Office 

Security  Operations 
File  Storage 


Hiqh  Security  Data  Center 

Reconfiaurable  Test  Suite  2 

Asset  Warehouse 

2  Operator  Rooms 

MLS  Environment 

1  Brief/Debrief  Conf  Room 
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^  Moving  Forward  with  the  NCR 

What  we  currently  are  doing  (October  2011  to  October  2012) 

•  One-year  beta-operation  phase  of  the  prototype  NCR 

•  J  ust  completed  the  first  live  experiment 

•  Built  out  the  range  to  emulate  a  1100-node  DoD  network  in  1-day 

•  Range  size  will  grow  to  allow  for  a  3000-node  experiment  by  J  anuary 

•  Transition  the  range  and  associated  technologies  to  USCYBERCOM 

The  NCR  is  available  to  agencies  across  the  Government  for  use  during 
this  phase 
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Working  with  the  NCR 

•  In-depth  Government  technical  reviews  are  held  quarterly 

•  Limited  to  Government  personnel  and  support  contractors 

•  Next  review  scheduled  for  November  15  in  Arlington,  VA 

•  Will  include  a  separate  briefing  for  those  interested  in  running 
experiments  on  the  NCR 

•  Contact  us  if  you  are  interested  in  attending 

(I  inendra.RankaOdarpa.mil) 
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